In my mind, the bottom line is that the official installation instructions tell us to create a single administrator-level account for running MLS, and I haven't heard of anyone who has successfully run MLS (including software updates) on any other kind of account. I certainly understand the common security principles that would lead you to want to run MLS under a less privileged account, but neither the instructions nor MLS itself were designed that way.